XSS | Classroom

TryHackMe Juicy: XSS to SSRF via unsanitised LLM output

Attacking LLMs

Juicy: XSS to SSRF via unsanitised LLM output

TryHackMe WAF Exploitation Techniques: encoding and evasion

Bypassing WAF

WAF Exploitation Techniques: encoding and evasion

TryHackMe HTTP Browser Desync: client-side smuggling via Werkzeug

HTTP request smuggling

HTTP Browser Desync: client-side smuggling via Werkzeug

TryHackMe XSS: reflected, stored, and DOM-based scripting attacks

cross-site scripting

XSS: reflected, stored, and DOM-based scripting attacks

TryHackMe Whats Your Name: XSS, CSRF and SQLi chain

XSS

Whats Your Name: XSS, CSRF and SQLi chain

TryHackMe Exploitation and Weaponisation: Proving Real Impact

Metasploit and Exploitation

Exploitation and Weaponisation: Proving Real Impact

TryHackMe XSS Introduction: Six Payload Contexts

Jr Penetration Tester

XSS Introduction: Six Payload Contexts

30 More PortSwigger Labs: JWT, XSS, CSRF Bypass

portswigger

30 More PortSwigger Labs: JWT, XSS, CSRF Bypass

30 PortSwigger Labs — Bug Bounty Marathon

portswigger

30 PortSwigger Labs — Bug Bounty Marathon

Web App Pentesting: Injection & Client-Side

sqli

Web App Pentesting: Injection & Client-Side